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Patent claims 

1. Method for accessing network-internal functions of 
telecommunication networks (Nl, N2), from an external site 
(Se), with access taking place via a secure service 
interface device (S2) of a network (N2) (access network) on 
the basis of a service level agreement valid for said 
service interface in favor of the external site (Se) , 
characterized in that 

it is verified on the part of the interface device (S2) on 
the basis of a request sent to it from the external site 
(Se) relating to a network-internal function, whether the 
request involves the use of a function of another network 
(Nl) (target network) and if so, a second request (5) 
relating to the functions of said network is exchanged 
between the interface devices (SI, S2) on the basis of a 
service level agreement (4) (transitive agreement) 
concluded between the interface device (S2) and a secure 
service interface device (SI) of the target network (Nl) . 

2. Method according to Claim 1, 
characterized in that 

access takes place in the context of a service, which is 
executed by the external site (Se) for a user (Mo), the 
home network of which is the target network (Nl) . 

3. Method according to Claim 1 or 2, 
characterized in that 

the transitive agreement is generated as a service level 
agreement in favor of the external site (Se) , in so far as 
a roaming agreement exists between the networks (Nl, N2) 
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set up as mobile radio networks and a service level 
agreement exists on the part of the access network (N2) in 
favor of the external site (Se) . 

4. Method according to Claim 1, 2 or 3, 
characterized in that 

the external site (Se) is a server for external services, 
which are executed in the area of the access network (Nl) 
or a visited network (N3) accessible via the access network 
using network-internal services for users (Mo) that are 
connected or logged in. 

5. Method according to one of Claims 1 to 4, 
characterized in that 

messages exchanged further to the second request (5) 
between the external site (Se) and the target network (Nl) 
are transmitted via the interface devices (SI, S2) , with 
the interface device (SI) of the access network forwarding 
messages exchanged between the external site (Se) and the 
interface device (S2) of the target network in a 
transparent manner. 

6. Method according to one of Claims 1 to 5, 
characterized in that 

messages exchanged further to the second request (5) 
between the external site (Se) and network centers (HI) of 
the target network are transmitted via the interface device 
(SI) of the access network, with the interface device (SI) 
forwarding the messages as a transparent proxy server. 
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7. Network device (S2) of a telecommunication network 
(N2), which is set up as a secure service interface device 
(S2) to execute the method according to Claim 1. 



